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I define DEFAULT_MAX_ACCESS_TIME 1'b1 

2. 

3. module main(ctk, reset, 

4. dataA, clientRequestA, jobCompleteA, clientGrantA, 

5. dataB, clientRequestB, jobCompleteB, clientGrantB, 

6. dataC, clientRequestC, jobCompleteC, clientGrantC, 

7. memoryData); 
8. 

9. input elk, reset; 

1 0. input [0:0] dataA, dataB, dataC; 

I I • input clientRequestA, clientRequestB, clientRequestC; 

12. input jobCompleteA, jobCompleteB, jobCompleteC; 

13. output clientGrantA, clientGrantB, clientGrantC; 

14. output [0:0] memoryData; 
15. 

16. wire [0:0] dataOutA, dataOutB, dataOutC; 
17. 

18. // Put sentries at the boundary signals and make them active constantly. 
19. 

20. // vx sentry dataA, dataB, dataC:clk; 

21 . // vx always activate(dataA,dataB,dataC); 
22. 

23. // Create three instances of the bus interface 
24. 

25. Buslnterface buslnterfaceA(clk, reset, clientRequestA, JobCompleteA, 

26. dataA, dataOutA, requestA, grantA, 

27. clientGrantA); 
28. 

29. Buslnterface buslnterfaceB(clk, reset, clientRequestB, jobCompleteB, 

30. dataB, dataOutB, requestB, grantB, 

31. clientGrantB); 
32. 

33. Buslnterface buslnterfaceC(clk, reset, clientRequestC, JobCompleteC, 

34. dataC, dataOutC, requestC, grantC, 

35. clientGrantC); 
36. 

37. RoundRobinArbiter arbiter(clk t reset, 

38. dataOutA, requestA, grantA, 

39. dataOutB, requestB, grantB, 

40. dataOutC, requestC, grantC, 

41. memoryData); 
42. 

43. endmodule // main 



fig. 9 A 
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44. module Buslnterface(clk, reset, clientRequest, jobComplete, 

45. data, dataOut, request, grant, clientGrant); 
46. 

47. input elk, reset, clientRequest, jobComplete; 

48. input [0:0] data; 

49. output [0:0] dataOut; 

50. // vx sentry dataOutxIk; 
51. 

52. output request; 

53. input grant; 

54. output clientGrant; 
55. 

56. parameter NO_REQ = 2'bOO; 

57. parameter REQ=2'b01; 

58. parameter GRANTED = 2*b10; 
59. 

60. reg [1 :0] state, nextState; 

61. // vx flop state; 
62. 

63. //assign request = ((state == REQ) |[ (state == GRANTED)); 

64. assign request = ((state == REQ) || ((state == GRANTED) && IjobComplete)); 

65. assign dataOut = data; 

66. assign clientGrant = grant; 
67. 

68. always @(state or reset or clientRequest or jobComplete or grant) 

69. begin 

70. if (reset) 

71. begin 

72. * nextState = NO_REQ; 

73. // vx deactivate(dataOut); 

74. end 

75. else 

76. begin 

77. nextState = state; 

78. case (state) 

79. NOJREQ: 

80. begin 

81 . // vx deactivate(dataOut); 

82. if (clientRequest) nextState = REQ; 

83. end 

84. REQ: 

85. begin 

86. // vx assert( n env1 \ clientRequest && IjobComplete); 

87. if (grant) nextState = GRANTED; 

88. end 

89. VGRANTED: 

90. begin 

91 . // vx activate(dataOut); 

92. // vx assert( n env2", IcIientRequest); 

93. if (jobComplete II 'grant) 

94. nextState = NO_REQ; 

95. end 

96. endcase // case(state) 

97. end //else 

98. end // always 
99. 

100. always @(posedge elk) 

101. state <= nextState; 

102. endmodule/ZBuslnterface FIG OB 
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103. module Round RobinArbiter(clk f reset, 

1 04. dataA, requestA, grantA, 

105. dataB, requestB, grantB, 

106. dataC, requestC, grantC, 

107. writeData); 
108. 

109. input elk, reset; 

1 1 0. input [0:0] dataA, dataB, dataC; 

111. input requestA, requestB, requestC; 

1 1 2. output grantA, grantB, grantC; 

113. output [0:0] writeData; 
114. 

115. // vx sentry dataA, dataB, dataC: elk; 
116. 

1 1 7. reg [0:0] watchDogTimer, nextWatchDogTimer; 

1 1 8. reg [2:0] state, nextState; 

119. // vx flop state, watchDogTimer; 

120. wire [0:0] maxAccessTime; 
121. 

122. parameter idle = 3'bOOO; 

1 23. parameter ready = 3 f b001 ; 

1 24. parameter stateA = 3*01 0; 

1 25. parameter stateB = 3'b01 1 ; 

126. parameter stateC = 3'b100; 
127. 

128. //next state logic 

1 29. always ©(reset or requestA or requestB or requestC or state or watchDogTimer) 

130. begin 

131. // vx deactivate(dataA,dataB,dataC); 

132. if (reset) begin 

133. nextState= idle; 

134. nextWatchDogTimer = 1 t>0; 

135. end 

136. else begin 

137. next8tate= idle; // default state 

1 38. //by default timer should increment 

139. nextWatchDogTimer = watchDogTii-ner+1'bl; 



FIG. 9C 
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140. 

141. case (state) 

142. idle: 

143. begin 

1 44. nextWatchDogTimer = 1 'bO; 

145. if (requestA || requestB || requestC) nextState = ready; 

146. end 

147. ready: 

148. begin 

1 49. if (requestA) nextState = stateA; 

1 50. else if (requestB) nextState = stateB; 

1 51 . else if (requestC) nextState = stateC; 

1 52. else nextState = idle; 

153. end 

154. stateA: 

155. begin 

1 56. // vx activate(dataA); 

1 57. nextState= stateA; 

158. // if request has been disabled or the max access time has 

1 59. //reached change state. 

1 60. if ((requestA == 1 *b0) || (watchDogTimer == maxAccessTime)) begin 

1 61 . nextWatchDogTimer = 1 'b0; 

1 62. if (requestB) nextState = stateB; 

1 63. else if (requestC) nextState = stateC; 

1 64. else nextState = idle; 

165. end 

166. end 

167. stateB: 

168. begin 

169. //vxactivate(dataB); 

170. nextState= stateB; 

171. if ((requestB == 1 'b0) || (watchDogTimer == maxAccessTime)) begin 

1 72. nextWatchDogTimer = 1 'b0; 

1 73. if (requestC) nextState= stateC; 

1 74. else if (requestA) nextState= stateA; 

175. else nextState= idle; 

176. end 

177. end 

178. stateC: 

179. begin 

180. //vxactivate(dataC); 

181. nextState= stateC; 

182. if ((requestC === 1'b0) || (watchDogTimer = maxAccessTime)) begin 

183. nextWatchDogTimer =rb0; 

1 84. if (requestA) nextState= stateA; 

1 85. else if (requestB) nextState= stateB; 

186. else nextState A idle; 

187. end 

188. end 

1 89. endcase//case(state) 

190. end 

191. end//always 



FIG. 9D 
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192. //state transition 

1 93. always @(posedge elk) 

194. begin 

195. state <= nextState; 

1 96. watchDogTimer <= nextWatchDogTimer; 

197. end 

198. //outputs 

1 99. assign grantA = (nextState == stateA); 

200. assign grantB = (nextState == stateB); 

201 . assign grantC = (nextState == stateC); 

202. assign writeData = (grantA ? dataA : 'DATAJ/VIDTH'bz); 

203. assign writeData = (grantB ? dataB : 'DATAJ/VIDTH'bz); 

204. assign writeData = (grantC ? dataC : 'DATAJ/VIDTH'bz); 

205. assign maxAccessTime = •DEFAULT_MAX_ACCESS_TIME; 

206. // vx always onetruefgrant", grantA, grantB, grantC); 

207. endmodule // RoundRobinArbiter 



FIG. 9E 
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2. Validation Results for Module "main' 

3 =========================== 

4. 

5 ========================= 

6. Functional Checks Summary 



8. Failed checks (FAILED) = 5 

9. Bounded failed checks (BOUNDED.FAIL) = 0 

10. Inconclusive checks (INCONCLUSIVE) = 3 

1 1 . Secondary failed checks (SECONDARY) = 0 

12. Interface checks (INTERFACE) = 12 



13. Skipped checks (UNPROCESSED/DISABLED/DEFERRED) =0 

14. Bounded passed checks (BOUNDED_PASS) = 0 

15. Passed checks (PASSED/USER PASSED/CONDITIONAL) =144 

16. 

17. Total checks =164 
18. 

20. RTL Characteristics Summary 

21. ========================== 

22. Number of inferred flops =10 

23. Number of inferred latches = 0 

24. Number of static X sources = 0 

25. Number of non-resettable flops = 0 
26. 

27 ======================= 

28. Summary of failed checks by type: 

29. ========================= 

30. [CA]=0 (out of 39) 

31. PE] = 1 (out of 40) 

32. [AX] = 1 (out of 15) 

33. [CME]=0 (out of 10) 

34. [CV]=0 (out of 29) 

35. IAC]=0 (out of 7) 

36. IAAO]=0 (out of 6) 

37. [AID]=0 (out of 9) 

38. ILVD] = 3 (out of 9) 



FIG. 13A 
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39. 

40. Block enable [BE] : 1 failed check 

41. 

42. FAILED BE : arbiter.nextState_bitOJ\X_6 

43. : Enable condition for block with assignment "arbiter.nextState_bitO_AX_6" is always off 

44. : Block with assignment w arbiter.nextState_bi«LAX_6" is defined on line 191 of n rr3.v" 
45. 

46. Assignment execution [AX] : 1 failed check 

47. 

48. FAILED AX : arbiter.nextWatehDogTimer_bitO_AX_1 

49. : Assignment w arbiter.nextWatchDogTimer_bitO_AX_r only has a constant 1 *b1 value 

50. : Assignment "arbiter. nextWatchDogTimer_bitO_AX_1 " is defined on line 1 79 of "rr3.v" 
51. 

52. Loss of valid data [LVD] : 3 failed checks 

53. 

54. FAILED LVD :dataA[0] 

55. : Loss of valid data has been detected on wire n dataA[0] n 

56. : Wire "dataA[0] n is defined on line 40 of n rr3.v w 

57. : VCD file is "roundRobin3/main/trace221 .vcd" 

58. FAILED LVD :dataB[0] 

59. : Loss of valid data has been detected on wire n dataB[0]" 

60. : Wire w dataB[0] n is defined on line 41 of "rtfY 1 

61 . : VCD file is "roundRobin3/main/trace223.vcd" 

62. FAILED LVD :dataC[0] 

63. : Loss of valid data has been detected on wire n dataC[0]" 

64. : Wire "dataC[0]" is defined on line 42 of "rr3.v" 

65. : VCD file is w roundRobin3/main/trace225.vcd M 



FIG. 13B 
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67. Summary of bounded failed checks by type : 

69. [CA]=0 (out of 39) 

70. [BE]=0 (out of 40) 

71. [AX]=0 (out of 15) 

72. [CME]=0 (out of 10) 

73. [CV]=0 (out of 29) 

74. [AC]=0 (out of 7) 

75. [AAO] = 0 (out of 6) 

76. [AID]=0 (out of 9) 

77. [LVD] = 0 (out of 9) 
78. 

80. Summary of inconclusive checks by type : 

82. [CA]=0 (out of 39) 

83. [BE] =0 (out of 40) 

84. [AX1=0 (out of 15) 

85. [CME]=0 (out of 10) 

86. [CV]=0 (out of 29) 

87. [AC]=0 (out of 7) 

88. [AAO]=0 (out of 6) 

89. [AID] = 0 (out of 9) 

90. [LVD] =3 (out of 9) 
91. 

92. Loss of valid data [LVD] 3 inconclusive checks 

93. 

94. INCONCLUSIVE LVD :buslnterfaceA.dataOut[0] 



95. : Valid data loss check on wire "buslnteriaceA.dataOut[0]" did not complete 

96. : Wire "buslnterfaceA.dataOut[0]" is defined on line 80 of "rr3.v" 

97. INCONCLUSIVE LVD :buslnterfaceB.dataOut[0] 

98. : Valid data loss check on wire "buslnterfaceB.dataOut[0]" did not complete 

99. : Wire "buslnterfaceB.dataOut[0]" is defined on line 80 of "rr3.v" 

100. INCONCLUSIVE LVD :buslnterfaceC.dataOut[0] 

101 . : Valid data loss check on wire °buslnterfaceC.dataOut[0]" did not complete 

102. : Wire "buslnterfaceC.dataOut[0]" is defined on line 80 of "rr3.v" 



103. 

104. =================================== 

1 05. Summary of secondary failed checks by type : 

106. ========================================== 

107. [CA]=0 (out of 39) 

108. [BE] =0 (out of 40) 

109. [AX] =0 (out of 15) 

110. [CME]=0 (out of 10) 

111. [CV]=0 (out of 29) 

112. [AC]=0 (out of 7) 

113. [AAO]=0 (out of 6) 

114. [AID]=0 (out of 9) 

115. [LVD]=0 (out of 9) 

FIG. 13C 
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116. ==================================== 

117. Summary of interface checks by type : 

118. =================================== 

119. [CA]=0 (out of 39) 

120. [BE]=0 (out of 40) 

121. [AX]=0 (out of 15) 

122. [CME]=0 (out of 10) 

123. [CV]=0 (out of 29) 

124. [AC] =6 (out of 7) 

125. [AAO]=0 (out of 6) 

126. [AID] =3 (out of 9) 

127. [LVD]=3 (out of 9) 
128. 

129. Assertion correctness (AC] : 6 interface checks 



130. 

131. INTERFACE AC :buslnterfaceA.envl 

132. : Correctness check on assertion "buslnterfaceA.envr is at the interface 

133. : Assertion "buslnterfaceA.envl M is defined on line 121 orrr3.v" 

134. INTERFACE AC :buslnterfaceA.env2 

135. : Correctness check on assertion n buslnterfaceA.env2" is at the interface 

1 36. : Assertion "buslnterfaceA.env2 tt is defined on line 1 27 of "rr3.v" 

137. : Check is used by conditional checks : 

138. AID :arbiter.dataA[0] 

139. INTERFACE AC ibuslnterfaceB.envl 

140. : Correctness check on assertion "buslnterfaceB.envl" is at the interface 

141. : Assertion "buslnterfaceB.envl" is defined on line 121 of "rr3.v" 

142. INTERFACE AC :buslnterfaceB.env2 

143. : Correctness check on assertion "buslnterfaceB.env2" is at the interface 

144. : Assertion "buslnterfaceB.env2" is defined on line 127 of "rr3.v" 

145. : Check is used by conditional checks : 

146. AID :arbiter.dataB[0] 

147. INTERFACE AC :buslnterfaceC.envl 

148. : Correctness check on assertion "buslnterfaceC.envl" is at the interface 

149. : Assertion "buslnterfaceC.envr is defined on line 1 21 of "rr3.v" 

150. INTERFACE AC :buslnterfaceC.env2 

151. : Correctness check on assertion "buslnterfaceC.env2" is at the interface 

152. : Assertion "buslnterfaceC.env2" is defined on line 127 of "rr3.v" 

153. : Check is used by conditional checks : 

154. AID :arbiter.dataC[0] 
155. 



156. Access of invalid data [AID] : 3 interface checks 



157. 

158. INTERFACE AID :dataA[0] 

1 59. : Wire "dataA[0f has accessed invalid data from the interface 

160. : Wire "dataA[0] n is defined on line 40 of "rr3.v" 

161. INTERFACE AID :dafaB[0] 

162. : Wire "dataB[0] n has accessed invalid data from the interface 

163. : Wire "dataB[0J" is defined on line 41 of "rr3.v" 

164. INTERFACE AID :dataC[0] 

1 65. : Wire "dataC[0]" has accessed invalid data from the interface 

166. : Wire "dataC[0] w is defined on line 42 of "rr3.v" 



FIG. 13D 
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167. 

1 68. Loss of valid data [LVD] 3 interface checks 

169. 

170 INTERFACE LVD :arbiter.dataA[0] 

< 71 ' • Wire "arbiter.dataAfO]" has loss of valid data at the interface 

172 " : Wire "arbiter.dataAfO]" is defined on line 141 of "rr3.v" 

173 INTERFACE LVD :arbiter.dataB[0] . . 

174 " : Wire "arbiter.dataB[0] n has loss of valid data at the interface 

175 ' : Wire "arbiter.dataB[0]" is defined on line 142 of "rr3.v" 

176 INTERFACE LVD :arbiter.dataC[0] 

1 77 ' : wire "arbiter.dataClO]" has loss of valid data at the interface 

178 ' : Wire "arbiter.dataC[0]" is defined on line 1 43 of "rr3.v" 

179. 
180. 



181 . Summary of unprocessed checks by type 

183. [CA]=0 (out of 39) 

184. [BE]=0 (out of 40) 

185. [AX]=0 (out of 15) 

186. [CME]=0 (out of 10) 

187. [CV]=0 (out of 29) 

188. (AC] =0 (out of 7) 

189. [AAO]=0 (out of 6) 

190. [AID]=0 (out of 9) 

191. [LVD]=0 (out of 9) 
192. 

193. I...] 
194. 

1 96. Summary of passed checks by type : 

197. ============================ 

198. [CA] =39 (out of 39) 

199. [BE] =39 (out of 40) 

200. [AX] = 14 (out of 15) 

201. [CME]=10 (out of 10) 

202. [CV] =29 (out of 29) 

203. [AC] = 1 (out of 7) 

204. [AAO]=6 (out of 6) 

205. [AID] =6 (out of 9) 

206. [LVD] = 0 (out of 9) 
207. 

208. [...] 
209. 

210. ================ 

211. List of inferred flops 
212. 



213. buslnterfaceA.state[0] 

214. buslnterfaceA.state[1] 

215. buslnterfaceB.statetf)] 

216. buslnterfaceB.state[1] 

217. buslnterfaceC.state[0] 

218. buslnterfaceC.state[1] 

219. arbiter.state[0] 

220. arbiter.state[1] 

221. arbiter.state[2] FIG. 13E 

222. arbtter.watchDogTimertO] 



